this post was submitted on 24 Dec 2023
457 points (98.9% liked)

Programmer Humor

19291 readers
1153 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 1 year ago
MODERATORS
Feyter@programming.dev
anzo@programming.dev
BurningTurtle@programming.dev
pylapp@programming.dev
457
Multifactor auth done right (l.roofo.cc)
submitted 9 months ago by chris@l.roofo.cc to c/programmer_humor@programming.dev
20 comments fedilink hide all child comments
 

Original https://icosahedron.website/@halcy/111631878003850824

all 22 comments
sorted by: hot top controversial new old
[–] bjoern_tantau@swg-empire.de 54 points 9 months ago (1 children)

They forgot something old, something borrowed and something blue.

[–] muntedcrocodile@lemmy.world 22 points 9 months ago (1 children)

da ba dee da ba di

[–] reflex@kbin.social 5 points 9 months ago (1 children)

da ba dee da ba di

Mm-mmm, waffles.

[–] HeckGazer@programming.dev 23 points 9 months ago (2 children)

Wow would you look at that, still none of them cover what SMS is >:( Almost like it's not a second factor, and fuck every corporation that tries to claim that it is

[–] JPAKx4@lemmy.blahaj.zone 41 points 9 months ago (1 children)

SMS is something you have, IE access to your phone. Doesn't mean it's the best option, SMS is notorious for being insecure

[–] HeckGazer@programming.dev 5 points 9 months ago (1 children)

The 10,000 support staff with dubious social engineering training at your service provider are not "something you have". Case in point literally a few weeks ago https://arstechnica.com/tech-policy/2023/12/verizon-fell-for-fake-search-warrant-gave-victims-phone-data-to-stalker/

[–] Kethal@lemmy.world 1 points 9 months ago* (last edited 9 months ago) (2 children)

This is an article describing someone impersonating an officer and submitting a fake warrant. It's incredible that Verizon fell for it, but what does it have to do with SMS?

[–] AVincentInSpace@pawb.social 1 points 9 months ago

It means that if I want access to something that has been texted to you, I don't exactly need to be a government in order to get it.

[–] jaybone@lemmy.world 6 points 9 months ago

It would be fine if it weren’t for sim swapping.

But try asking anyone at your bank about a yubikey and watch them stare at you like you have broccoli growing out of your ears.

[–] Cannacheques@slrpnk.net 16 points 9 months ago

Something random as fuck like what hand your married to and when you broke up with your hand and married your other hand

[–] sv1sjp@lemmy.world 14 points 9 months ago (1 children)

As I Cybersecurity Consultant, I totally agree

[–] MCHEVA4EVA@lemmy.world 8 points 9 months ago (2 children)

I get my passwords from the collective unconsciousness.

[–] Natanael@slrpnk.net 6 points 9 months ago (1 children)

There needs to be an SCP for a password manager

[–] Kissaki@programming.dev 4 points 9 months ago

One time passwords

Forgotten after one use

[–] kherge@beehaw.org 8 points 9 months ago

That last one reads like C’thulhufactor.

[–] EpeeGnome@lemmy.fmhy.net 6 points 9 months ago

Now I want to go play Cultist Simulator or Book of Hours. This list is also a list of the sorts of cards the games use to represent the narrative/puzzle you're playing through. Highly recommend.

[–] the_artic_one@programming.dev 5 points 9 months ago

Welcome... to Nightvale

[–] valen@beehaw.org 3 points 9 months ago

Something you only know in a parallel dimension.

[–] docAvid@midwest.social 1 points 9 months ago

This has some real "crimson eleven delight petrichor" vibes.